Dev Sharma

Life Around Books, Movies , Money ,Stocks, Modi, Computer and Country

[Dev Sharma @er_dev89]

जिस उम्र में हमारे दांत टुटा करते थे,
उस उम्र में आज बच्चो के दिल टूट जाते है.... ।

[A Therapist @ATherapisty]

Someone's Confession #49

#confession

[Roni @Muskan_singh70]

आश्रम s1

[Brian4new @GustBrian]

How to quit a job with style 😂

[Akul (𝑨𝑻10) @Loyalsachfan10]

Imagine being the greatest batsman in the world and then casually defending the final over in two of the biggest ODI thrillers. 🐐🇮🇳

Hero Cup 1993 vs South Africa
Titan Cup 1996 vs Australia

Sachin Tendulkar wasn't just a batting genius. When India needed a hero with the ball, the Master Blaster delivered too🔥

There will never be another Sachin Tendulkar.

[Historic Vids @historyinmemes]

One simple hand gesture was enough to blow his cover. While ordering three drinks, he held up the wrong three fingers, unknowingly exposing himself as an outsider. In Germany, counting traditionally begins with the thumb, while in other countries, people often start with the index finger. That seemingly insignificant difference was all it took to raise suspicion.

What makes this scene from Inglourious Basterds so brilliant is how an ordinary cultural habit becomes a deadly mistake. He had mastered the language, maintained his disguise, and appeared to fit in perfectly. Yet one instinctive movement revealed what his words and appearance had managed to conceal.

The most chilling part is the sudden shift in tension. No threats needed to be spoken, and no weapons needed to be drawn. Everyone at the table understood that his identity had been compromised, turning an ordinary conversation into a deadly standoff. Sometimes, the smallest mistake can have the deadliest consequences.

[Roni @Muskan_singh70]

बस एक बार हां कर दे... 😱😱

[𝐀𝐫𝐲𝐚𝐧 🕊️ @AryanRooh]

BC puri series dekho..💀🍿

[Legend @Tensorianlegend]

Someone in this video is giving the vibes of those dehati aunties who are suddenly exposed to wealth after spending their whole life in the slums of Nalasopara. No one can guess who it is.
Nice performance by Miss Fadnavis, btw.

[CricXGoat @GoatXCric]

Throwback to when Michael Vaughan and the rest of the England commentators were sitting in the commentary box discussing how to beat India… then they suddenly saw Rishabh Pant doing catching practice with the England players. 😂😭

The funniest part? Pant was taking catches while Jonny Bairstow was standing in the slips! 😂 The same Bairstow who had dropped the most catches as England’s wicketkeeper. 🤣

The commentators were completely stunned and said, “I’ve never seen anything like this in my life!” 😂😂

[Mona Shandilya @RoseTint4]

Some fools think that threatening people with FIRs will stop them from making fun of the GOAT singer. 😂😂

Plastic surgery can’t fix a bad voice.

[The Hunter @TheHunterBNS]

Situation of children from Single mother.

Their personal life is shared in social media.

Now mother is still claiming that she is doing for finance.

Single mothers don’t care for own children.

[anushiya @anushiyaxx]

Don't judge a book by it's cover quickly

[Shash @pokershash]

I generally avoid speaking on this topic, but this needs to be said by someone.

Amruta Fadnavis is not just a private individual. She represents herself as the Chief Minister’s wife at numerous events and gets singing albums and opportunities because of that position.

But whenever something goes wrong, she is projected as an individual. No, she cannot have it both ways.

She was a banker and held a good position. That was her own achievement. But her singing career and the opportunities that come with it are largely because of her husband’s position.

And if you genuinely believe she is getting singing contracts purely because of her voice, I hope you are being paid well enough to pretend to be deaf.

[Malay Krishna @Malay4Product]

After eMudhra, this is another critical security flaw that all of us need to know about.

Let me start from the very basics.

See, when you open a website, your phone or laptop doesn't store the website. It asks for it.

Somewhere far away, there's a computer that's always switched on. It's called a server. When you open a site, your phone sends a message to that server saying "please send me this page."

The server builds the page and sends it back. All of this happens in under a second, of course.

Obviously, servers need instructions to do this.

Those instructions are written in programming languages, the same way we write letters in Hindi or English.

PHP is one of the most popular languages servers use to build these websites. It's been around since the 1990s.

You may not have heard of it, but you've used it many times. WordPress runs on PHP, and so do online shops built with tools like WooCommerce, Magento and Shopware.

A lot of school websites, clinic booking pages, coaching centre sites, local news portals and small business websites in India also run on it.

Now whenever there is a gap observed, it is reported as a vulnerability.

A vulnerability is a mistake in software that a bad person can use to do something they shouldn't be able to do.

Think of it like a building with a broken window.

The building still works fine every day. But if a thief finds that window, they can climb in.

Each serious vulnerability gets an official ID number, called a CVE. That's what "CVE-2026-109618" and "CVE-2026-109619" in the FBI post mean.

Now, security researchers found two serious bugs inside PHP itself.

Together, they've been nicknamed "PHP2Shell."

Both were rated 9.2 out of 10 for how dangerous they are. That's about as high as it usually gets.

The technical name of the vulnerability is "remote code execution." In simple words, someone sitting anywhere in the world can make a website's server follow their instructions.

They don't need a password. They don't need an account. They just need to send the server the right kind of request.

Imagine a stranger walking up to a shop counter, saying a few strange words, and the shopkeeper hands over the keys to the shop, the cash box and the customer register.

That's how bad this is.

Once attackers control a server, they can steal customer data like names, phone numbers, addresses and order history.

They can change the website to show fake payment pages or scam pop-ups. They can lock the files and ask for ransom.

They can even use that server to attack other websites.

To understand how these bugs work, think of a PHP server like a busy restaurant kitchen.

Every visitor to the website is like a customer placing an order.

The first bug happens when the kitchen runs out of utensils in the middle of an order. The chef stops halfway through getting the order slip ready.

But then the waiter comes, sees the half-done order and treats it as a proper order.

An attacker can cause that confusion on purpose and slip their own instructions into it.

The second bug is like the kitchen not wiping the whiteboard properly between customers. Some notes from the last order stay behind, even though they should've been erased.

A clever attacker can use those leftover notes to take control.

One of these bugs can also leak small pieces of the server's memory to the attacker.

That's similar to the famous Heartbleed bug from 2014, which affected a large part of the internet.

So, how long was this hole there?

This is the part that shocked me most. The weak code goes back to PHP 5.4, which came out in 2012. That means every PHP version from 5.4 up to 8.5.11 is affected.

For around 14 years, a huge number of websites were running with this hole, and nobody knew.

But why was it found now?

Wiz, one of the security firms involved, said these are among the most severe bugs ever found in PHP.

They also said frontier AI models helped make the attack practical. Turning these bugs into a working attack needed a long, complicated chain of steps that would've been very hard for humans to do alone.

So AI is now helping people find old, hidden holes much faster. That's great when good researchers find them first.

But it's dangerous when bad actors do.

A security firm called Calif found ways to exploit the bugs on August 1 and reported them to the PHP team on August 11.

Wiz reported them separately on August 24.

Normally the plan is simple. Find the bug, fix it, then tell the world once the fix is ready.

But details leaked online on October 20, before the fix was out.

By 7:43 am UTC on October 21, Cloudflare had already spotted early attacks. PHP released the fixed versions at 2 pm UTC that same day.

So attackers got a head start of several hours.

Researchers have already shown it working against Magento and ten other PHP apps.

The FBI has a team that tracks major cyber threats. When a bug this big hits software used by millions of websites, they warn organisations to act fast.

Their advice is very direct. Update right away. If you can't, take the system offline until you can. Watch for signs of attack. And if you find you've been hacked, save the records and report it.

When a government agency says "switch it off if you can't fix it," you know it's serious.

If a website runs PHP 8.1 or older, it has a bigger problem. Those versions are no longer supported, so they won't get this fix at all.

The only option is to upgrade.

For a normal person, you don't need to update anything on your phone for this. The fix has to happen on the websites' servers.

But for the next few weeks, be a little more careful on small or unfamiliar websites. Don't trust sudden pop-ups asking you to download something.

Be careful if a payment page looks different from usual. Pay with UPI or cards that have good fraud protection. And if a site you use tells you it had a data problem, change your password there.

What if you run a website?

If you run a business site, an online store, a WordPress blog, a coaching centre site or a booking page, message your developer or hosting company today.

Ask a simple question: "Is our PHP updated to the fixed version?"

We have millions of small businesses, clinics, schools and D2C brands with websites built cheaply years ago and never touched again.

Many still run old PHP versions. Those are exactly the sites most likely to get hit, and the owners may not find out until customer data is gone or their site starts showing scam pages.

AI is making it faster to find old weaknesses in the software the internet runs on.

The old habit of building a website once and forgetting it doesn't work anymore. If you have a website, someone needs to be responsible for keeping it updated.

[Veer Syngh @Syngh_Unleashed]

The elderly lady here in this clip is Rani Lakshmi Kumari Chundawat — daughter of the ruler of Deogarh State of Mewar. She was a renowned writer honoured with the Padma Shri, and also served as MP for six years.

In this clip, she is explaining how Marathas took full advantage of Mewar’s war-torn condition (as a result of resisting invaders for centuries) by raiding & pillaging its territories even more than the Mughals ever did. She further explains how the main victims of these atrocities were mostly innocent civilians & peasants — who couldn’t even afford to leave their fields out of fear of getting ravaged by Maratha raiders, who didn’t even spare fodder!

This isn’t just the story of Mewar, but that of every Hindu territory subjected to Maratha depredations — from Gujarat & Rajasthan in the West to Orissa & Bengal in the East, even all the way up till Karnataka & Tamil-Nadu in the South. Contemporary accounts attest how Maratha raiders followed a 𝙨𝙘𝙤𝙧𝙘𝙝𝙚𝙙-𝙚𝙖𝙧𝙩𝙝 𝙥𝙤𝙡𝙞𝙘𝙮 of destroying crops & livestock, but retreating (using swift ponies) the moment any native army arrived at scene to fight them.

And today, descendants of those scoundrels take pride in it, by celebrating the misery of innocent Hindus as some sort of an achievement. Never forget that these are the same people who brag about being 𝙃𝙞𝙣𝙙𝙪-𝘿𝙝𝙖𝙧𝙢𝙧𝙖𝙠𝙨𝙝𝙖𝙠𝙨 24/7 on social media.

[tyler ☠︎︎ @kingofbrethren]

every time i rewatch pirates of the caribbean this scene manages to put the biggest smile on my face... adventure movies are the best :)

[Hindutva Knight @HPhobiaWatch]

"I came from Bihar. Muslim rural population is 6%, Urban Population is 24%. Muslims live in cities, we will shut down cities then only govt will listen to us"

~Sarjeel Imam a day before the Delhi riots

This whole speech straight up call for violence

[HasnaZarooriHai🇮🇳 @HasnaZaruriHai]

ज़िंदगी में बस इतनी Understanding वाली बीवी चाहिए! 😂🥹

[Susmit 🌠🕉️ @Susmit_999]

The Trend is Picking Up

Some Girls are Fed up with the Strong Independent Single Women Tag

She Says Nobody is concerned about her or even asking her How She is ,Is she okay ,Is Everything Alright ?

Condition were good when She was weak women & not Today's Fake Strong women Tag

[Viktor @desishitposterr]

Uploading the full 40 minute Sharjeel speech, since many might not have seen it.

Please watch and understand the mindset.

Him and his ilk are Pakistanis living in India.

Many young muslims from JNU/AMU/JMI espouse the same ideology.

Watch.